Questions tagged [wmi]

Windows Management Instrumentation

Filter by
Sorted by
Tagged with
39 votes
9 answers
168k views

Which permissions/rights does a user need to have WMI access on remote machines?

I'm writing a monitoring service that uses WMI to get information from remote machines. Having local admin rights on all these machines is not possible for political reasons. Is this possible? What ...
jpoh's user avatar
  • 821
32 votes
6 answers
8k views

Should I install Windows Management Framework 3.0?

I'm posting this as a BIG CAVEAT to everyone. I know it's not a standard Q&A, but I think this is something every Windows admin should know. There is a very real risk of falling into Big Troubles. ...
Massimo's user avatar
  • 70.7k
22 votes
2 answers
167k views

Why is my System event log full of WMI Performance Adapter messages?

The System event log continually shows these messages: The WMI Performance Adapter service entered the running state. and then The WMI Performance Adapter service entered the stopped state. ...
Carlton Jenke's user avatar
21 votes
2 answers
61k views

What is stored in %Windir%\System32\LogFiles\WMI\RtBackup?

I occasionally notice in Resource Monitor hard disk activity related to ETL files in the folder C:\Windows\System32\LogFiles\WMI\RtBackup. Which process/service creates these ETL files and what is ...
Helge Klein's user avatar
  • 2,111
20 votes
8 answers
13k views

Identify Windows 2012 Server core

I want to detect if a 2012 server is has been setup as a Core install using WMI. An earlier question, would seem to indicate that I can get the OperatingSystemSKU from Win32_OperatingSystem. My ...
Zoredache's user avatar
  • 131k
15 votes
1 answer
16k views

SCCM 2012 SP1 - DownloadContentFiles() failed with hr=0x80041013

We noticed our Automatic Deployment Rules for Software Updates failed to automatically download and apply this month's patches from Microsoft although they are correctly listed in the Catalog. The ...
user avatar
14 votes
8 answers
58k views

What is the best (free) tool to wrap an .exe into a MSI?

I'm looking at deploying some software via GPSI and the current version of the software is distributed as a .exe so I need to convert it to an MSI file. furthermore, why does MS still distribute some ...
GNUix's user avatar
  • 490
14 votes
5 answers
17k views

What is the closest equivalent of "load average" in Windows available via WMI?

Linux has a notion of Load Average which is defined as: System load averages is the average number of processes that are either in a runnable or uninterruptable state. A process in a runnable state ...
leonigmig's user avatar
  • 327
14 votes
1 answer
7k views

Common WQL Monitoring Queries

What WQL queries would you use for monitoring typical Windows bottlenecks? Which would you use to obtain data similar to 'top' or 'netstat'? What interval would you poll at? Here are a few that I ...
12 votes
1 answer
4k views

Is anyone using an SNMP and/or WMI poller to push custom metrics to Amazon CloudWatch, and if so how?

Amazon CloudWatch has a decent console, and an alarm system which uses Amazon SNS for notifications. Originally it only gave you AWS metrics, e.g. EC2 instance CPU utilization. Recently they added ...
Greg Hendershott's user avatar
11 votes
3 answers
2k views

Installing Windows Management Framework 3.0 basically destroyed WMI, how can I fix it without reinstalling the O.S.?

Related, of course, to this question. Before discovering it was somewhat... dangerous, I installed Windows Management Framework 3.0 on a number of Windows Server 2008 R2 SP1 servers, and WMI got ...
Massimo's user avatar
  • 70.7k
11 votes
2 answers
6k views

WmiPrvSE memory leak on Windows 2008 *R2*

I've seen references on Windows 2008 to WmiPrvSE leaks, but nothing about Windows 2008 R2. We're running R2 on top of Hyper-V (2008). We are also running NSClient++ for monitoring from opsview. Over ...
MichaelGG's user avatar
  • 1,739
11 votes
4 answers
13k views

Windows 10 WMI and Event Viewer access denied

We have a Windows domain where I used GPOs to enable remote management and monitoring of all of our workstations using WMI. I can also connect to all of our computers with Computer Management and ...
Todd Wilcox's user avatar
  • 2,861
11 votes
4 answers
30k views

Network Logon Issues with Group Policy and Network

I am gravely in need of your help and assistance. We have a problem with our logon and startup to our Windows 7 Enterprise system. We have more than 3000 Windows Desktops situated in roughly 20+ ...
user avatar
10 votes
1 answer
159k views

How to use WMIC to connect to remote machine and output OS information to a file?

I want to know how to use WMIC to connect to remote host and output their PC's OS information(Installed programs list) to a file. I tried wmic /node: <IP address> OS get vendor, name > c:\...
PYO's user avatar
  • 111
10 votes
5 answers
66k views

How to find the creation date of a local user account?

I would like to get the creation date of a local user account (Win 7 if it matters). I've looked at the following WMI objects (and google of course): Win32_UserAccount Win32_NetworkLoginProfile The ...
MDMoore313's user avatar
  • 5,581
10 votes
2 answers
114k views

List ALL Printers using Powershell

I'm having issues listing all the printers on a computer using Powershell. We have a batch script that will add/remove/list "per computer" printers using PrintUI. I can use PrintUI to list the ...
Schlauge's user avatar
  • 156
9 votes
1 answer
8k views

DFSR-related WMI info is missing

OS: Server 2012 Core and Server 2012 R2 Core. DFS-Replication is installed and appears healthy. I am using WMI to collect information from DFSR replication members. The queries work on many of the ...
Ryan Ries's user avatar
  • 55.7k
8 votes
1 answer
22k views

How to apply an Group Policy only to Clients in a specific IP range? (using WMI Filter)

I need to apply a GPO only to some computers in a specific network range. I'm aware that there many other solutions for this issue. I could group them into an OU or use Sites. But the current ...
CHfish's user avatar
  • 353
8 votes
2 answers
7k views

powershell: How to check if S.M.A.R.T is enabled on remote machines

I was attempting to get disk info of remote machines, including whether or not SMART is enabled on the drive by using the win32_diskdrive class. This is trickier than I thought. While it's easy ...
red888's user avatar
  • 4,233
8 votes
1 answer
3k views

How to accept EULAs for Software updates deployed through SCCM using Powershell

I'm trying to use the Start-CMSoftwareUpdateDeployment cmdlet to deploy a software update group to an existing collection. PS WHO:\> Start-CMSoftwareUpdateDeployment -SoftwareUpdateGroupName "...
MDMoore313's user avatar
  • 5,581
8 votes
3 answers
11k views

SCCM Global Condition WQL Query Type Mismatch (wbemErrTypeMismatch - 0x80041005)

We have been handling all of our targeting logic for Packages (and now Applications) with Collections. Now that we have moved from SCCM 2007 to SCCM 2012 SP1 it was recommended that we move that logic ...
user avatar
7 votes
2 answers
42k views

How to monitor DFSR backlog more efficiently than dfsrdiag

Is there a way to monitor the DFSR backlog in a manner more efficient than using dfsrdiag.exe backlog? I wrote a program that just slurps in the backlog count via dfsrdiag.exe backlog /smem:alpha /...
Emmaly's user avatar
  • 435
7 votes
1 answer
395 views

GPO software deployment without WMI?

I put together a GPO to deploy a MSI file to a security group comprised of computer objects. After rebooting a test workstation so that it picks up its group membership and running gpupdate, I then ...
Bill Sambrone's user avatar
7 votes
1 answer
5k views

What wmi counters can indicate port exhaustion

I'm currently investigating an issue in which we suspect port exhaustion from too many outgoing connections is a factor. I'd like be able to identify when the server is at or near to port exhaustion, ...
Foo42's user avatar
  • 223
7 votes
2 answers
3k views

What are the minimum permissions to read the WMI class 'MSSerial_PortName'?

I am configuring a local application user (part of BUILTIN\Users) on a Windows 7 kiosk. The kiosk has a special USB device running on a virtual COM port. The user needs permission to read the WMI ...
Anthony Mastrean's user avatar
6 votes
5 answers
3k views

Powershell recursive WMI query

I'd like to start at the top of a WMI namespace, recurse through all the objects, then recurse through each object's property list, filtering out and returning to console only those properties that ...
quux's user avatar
  • 5,368
6 votes
3 answers
32k views

Is there a way to set access to WMI using GroupPolicy?

From various documentation it appears that to change WMI access you need to use WMI to access the running service and modify specific parts of the tree. Its kind of annoying changing 150,000 hosts ...
Greg Domjan's user avatar
6 votes
2 answers
677 views

identify / fingerprint a Windows Server core installation versus full

Seems like this should be easy, but I am not finding any information on how to remotely identify a Windows Server "core" installation as such, via WMI, Powershell or other method that can query lots ...
Dmart's user avatar
  • 304
6 votes
1 answer
130 views

WMI permissions for changing local IP without elevated privileges

I have implemented a tiny tool that allows one to change the IP settings of a selected Network Interface (NIC) by overwriting the values via the WMI. I've noticed that the tool can change the settings ...
Alexander Zwitbaum's user avatar
6 votes
1 answer
11k views

WMI Rights required to read root\MicrosoftIISv2 in IIS7 with IIS6 compatibility mode

I need to manage my IIS7 (Windows Server 2008) remotely with a WMI IIS6 API. So I added the IIS6 WMI Compatibility and IIS6 Metabase Compatibility roles to access the root\MicrosoftIIsv2 namespace. I ...
JoeBilly's user avatar
  • 121
6 votes
1 answer
3k views

Have issue with monitoring 32bit app pools running on 64bit IIS

I am performing a monitoring task on my 64bit web server which has couple of applications pools running in 32bit mode. I am using .Net CLR Memory object in perfmon to monitor them. However, my ...
ronin's user avatar
  • 121
6 votes
0 answers
2k views

Powershell Remoting not working

I have PSRemoting working on 90% of my servers. But there are a handful that I'm not sure what's going on with them. Server 2016. Most of them are Hyper-V hosts, but not all. Enable-PSRemoting -...
UnknownGnome's user avatar
6 votes
3 answers
3k views

Correlating volumes and physical disks through WMI

I'm trying to correlate volumes (as enumerated from win32_volume for those where DriveType = 3) back to win32_physicaldisk instances. Everything that I've seen in my research points to the answer ...
Ben Thul's user avatar
  • 3,024
5 votes
6 answers
6k views

Useful WMI admin scripts

In a comment to my response to this question , cop1152 said he loved WMI scripts. Well, so do I! What are your favourite, best, most useful scripts you'd like to share with the community? thanks.
5 votes
3 answers
2k views

checking for missing values in WQL or (WQL/WMI filter to return `true` for desktops/servers, but `false` on laptops)

I have a challenge where I want to use a GPO to set a Power Plan. Working on constructing a WMI Filter (using WQL), I ran into a problem of determining a set of WQL statements that would always ...
brandeded's user avatar
  • 1,860
5 votes
3 answers
4k views

How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc)

How to detect current media type in CLI under Windows? (DVD-RW, BD-R, etc) I've tried with wmic cdrom get /format:list but no info about the current media type. I want to detect if the disc is a CD, ...
Jeremy Dicaire's user avatar
5 votes
2 answers
7k views

Can I find the path to a DCOM application executable with WMI or Powershell?

I have installed (and registered) a DCOM application on a W2K8R2 machine, and its GUID can be found in the DCOM list shown by dcomcnfg. I can also use Powershell to find a Win32_DCOMApplication or ...
mjn's user avatar
  • 943
5 votes
1 answer
7k views

Win32_OperatingSystem.FreePhysicalMemory and $_.TotalVisibleMemory giving output in wrong units

I've been putting together a pretty simple script to monitor some aspects of our Terminal Server farm usage and am implementing a section where I check the memory usage on the servers at a given point ...
Get-HomeByFiveOClock's user avatar
5 votes
1 answer
4k views

Difference between CurrentClockSpeed and MaxClockSpeed

Rationale this belongs on ServerFault rather than StackOverflow - I already have my program which gets the value, I am querying the value returned and what it means. I have an in-house program which ...
Ben Pilbrow's user avatar
  • 12.1k
5 votes
4 answers
4k views

Does WMI cause CPU Creep?

I have a few servers, running Server 2003 Std/Ent and SQL 2000/2005, that I've noticed will start showing higher CPU usages over time. Stopping the WMI service and restarting it will always bring it ...
SqlACID's user avatar
  • 2,196
5 votes
3 answers
3k views

How to retrieve Serial Number from Windows on new U/EFI box?

I need to retrieve the hardware serial numbers from a set of new HP mini desktops that need provisioning. This worked in the past using a WSH script to query it via WMI. Unfortunately, the newer ...
Gringo Suave's user avatar
5 votes
2 answers
8k views

How do I identify a volume in WMI from a volume name reported in the event log?

I have a Windows 2008R2 server that's reporting the following error: The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume \Device\...
Kev's user avatar
  • 7,887
5 votes
1 answer
171 views

Bug in WMI namespace for MicrosoftDNS Statistics class?

I'm trying to query DNS statistics from Windows Server 2012 via WMI. If I run the following command in Powershell: Get-WmiObject -Namespace root\MicrosoftDNS -Class MicrosoftDNS_Statistic | ?{ $_....
Mark Henderson's user avatar
5 votes
3 answers
17k views

WMI: wmic linux agent query error: NTSTATUS: NT_STATUS_ACCESS_DENIED

Myself new to wmic and keep trying for a long time with default agent query approach. wmic is linux based WMI tool to talk to windows WMI agent. While trying to fetch data with wmic from nt(win7 with ...
mav_2k's user avatar
  • 141
5 votes
1 answer
1k views

WMI Impersonation levels within vbscript / ASP code

I have an IIS 7.5 web site running "classic" ASP code (not ASP.NET) where the site is running under the normal service context, and only "Windows Authentication" is enabled. Users and navigate the ...
Skatterbrainz's user avatar
5 votes
4 answers
7k views

WMI permissions: Select CommandLine, ProcessId FROM Win32_Process returns no data for CommandLine

I am gathering performance data via WMI and would like to avoid having to use an account in the Administrators group for this purpose. The target machine is running Windows Server 2003 with the latest ...
user57935's user avatar
5 votes
2 answers
2k views

How to map which volume resides on which partition in Windows?

Problem: I need to figure out which volume corresponds to what partition(s) which corresponds to what disk in an extremely efficient script able manor. I know how to correspond which partition ...
Rusty Weber's user avatar
5 votes
1 answer
10k views

WMI filter for Internet Explorer 10+

I need to apply a GPO on all machines with IE 10+ but the setting does not need to be and shouldn't be applied to ie 9. All the machines are Windows Vista, 7, and 8 (some 32 bit and others 64). I ...
Justin Garrison's user avatar
5 votes
3 answers
2k views

How do I launch a command on a remote computer with an invalid domain trust? (using local creds)

I intend to use WMIC to reset the trust of a machine that is remote, and off the network. All of the following variations result in an "access denied": The following works fine: net use \\patterson-...
makerofthings7's user avatar

1
2 3 4 5
8